Can log in only if user is staff (#73)