Better role definitions, password repeat checks