added checker to ensure that login is associated with a staff account