code: @Override
      public boolean isUserInRole(String role) {
          if (userRoles == null) {
              return false;
          }
  
          return userRoles.contains(role);
      }
docs: /*
  (non-Javadoc)
  @see
  javax.servlet.http.HttpServletRequestWrapper#isUserInRole(java.lang.String
  )