am i missing where you test that the user has the appropriate permission to role to view the portal, i was presuming there would be a specific permission eg: Payments:Portal