code: function getRoles (session) {
      // return roles from session or default
      return session && Array.isArray(session.roles)
          ? session.roles
          // default roles
          : ['all', (session && session.accountId ? 'authenticated' : 'anonymous')]
  }
docs: @function getRoles
  
  get roles from session or use defaults. default roles are all and either
  authenticated or anonymous based on whether or not session has accountId.
  
  @param {object} session
  
  @returns {array}