Fix cookie login code so Role data is passed to Session