The error is here:
<module-option name="rolesQuery">SELECT Role, RoleGroup FROM Roles WHERE PrincipalID=?</module-option>
As long as your RoleGroup does not resolve to "Roles" it will not work with the default JEE mechanisms. So either make sure every entry for RoleGroup in your DB is "Roles" or change the query to:
SELECT Role, 'Roles' FROM Roles WHERE PrincipalID=?
You can then delete the column RoleGroup from the DB.
Frank