added role check to login