infinite redirect loop for user role