Fix strpos empty in checkPassword
Add role_update_right for API access