Check if the user has rollback rights before logging them in