pass an error message to fail role redirect