added role to session & fixed patient login