altered login function to check for roles and lockout at the same time, the db FUNCTION loginUser() now returns a UID even if the user is locked out. It's up to the application to handle the check for that flag while it's checking for roles