login cleanup, user roles