move login settings to separate module

move login settings to separate module
update permissions, simplify roles