Block a user
Remove roles from jwt
On the server side we need to now include a role check this will still allow for the api to be used at the same time as the front end so someone else could ideally make there own frontend