It seems that calls to getCurrentRoles() in /farcry/core/packages/security/security.cfc are not using the internal class cache which is possibly causing too many database queries.

Current code:
<cfreturn application.factory.oUtils.listMerge(this.factory.role.getDefaultRoles(),session.security.roles) />

Possible future code:
<cfreturn application.factory.oUtils.listMerge(this.cache.defaultroles,session.security.roles) />

Note that "this.cache.defaultroles" is set in initCache() which is in turn called from init()