added a role based login method to UserBean