now retrieves user authorisation level in login, and stores it as a static global in application
staffLevel=1 for basic, staffLevel=2 for managers