Sets the JwtRolesMapper used to resolve roles from a verified token. Defaults to JwtRolesMapper.noRoles.