save user roles and email upon login, refactor group saving on profile a bit
add option to save password hash upon login
remove redundant code, already done todo
allow the user to check his own current password