cf 225, diego 0.1446.0, etcd 22, garden-linux 0.330.0

Deployed fine. Log in with admin, no problems.
cf create-user -- works, user can login
cf set-org-role or cf set-space-role -- "Server error, status code: 503,
error code: 20004, message: The UAA service is currently unavailable"

Where to look next? Problem?

Snippet from cloud_controller_ng.log:
"timestamp":1453214684.8997626,"message":"UAA request for token failed:
#<CF::UAA::NotFound: invalid status response:
404>","log_level":"error","source":"cc.uaa_client","data":{"request_guid":"9a23635a-9bd1-466d-4634-09a5b5b68ad5::d81a9295-1cd4-4bc0-aba8-e6be21b078d6"},"thread_id":70231565138100,"fiber_id":70231564408960,"process_id":6686,"file":"/var/vcap/data/packages/cloud_controller_ng/80b067d32996057a4fc88fe1c553764671e7e8e8.1-9d085696303be97998891bd2c719646024909e5a/cloud_controller_ng/lib/cloud_controller/uaa/uaa_client.rb","lineno":28,"method":"rescue
in token_info"}
{"timestamp":1453214684.9005187,"message":"Request failed: 503:
{\"code\"=>20004, \"description\"=>\"The UAA service is currently
unavailable\", \"error_code\"=>\"CF-UaaUnavailable\",
\"backtrace\"=>[\"/var/vcap/data/packages/cloud_controller_ng/80b067d32996057a4fc88fe1c553764671e7e8e8.1-9d085696303be97998891bd2c719646024909e5a/cloud_controller_ng/app/controllers/runtime/organizations_controller.rb:128:in
`rescue in block (2 levels) i