Check for provider roles before the default roles check

Problem

The openid connect throws an exception if the default roles are not set for the client domain even if the openid provider provide the roles in the claims response.

The openid authorization should only stops when no claims roles are provided and when the default roles are not defined for the client.

Change the log level from info to error when such problem occurs.