Users' role changes are now reflected on subsequent logins through CAS.

This also will reflect changes to a user's email address, name, and ID.