FIX redirect loop for user without role