Added isLoginDisabled() check for cand sesh launch
Added isLoginDisabled() check to authn filters
SystemUser auth filter now accepts list of roles