fixed login / registration redirects and added User role