inspect user role on login and redirect them to correct place