correct security post auth handling in looking local including specialty...

... role handling to allow drugs and letters to work correctly