Add userIsInRole

Also adding redirect if roles are correct... not great but someone can help make this cleaner?