add check role for logon