Bugfix for replacement login and permission fix

bugfix:
User was redirected on all logins, also replacement login, which
this made it impossible for them to change passwords

permission fix:
added proper role for voucher view