first implementation of user roles
blocked the login for non-panel users