User Login and Authorization in place, logout, hides buttons if
incorrect role, blocks at service level if incorrect role