fixed a bug with the IsInRole common rule. It was enforcing the user be in every role, not just one of the provided list of roles.
cleanup up the UI's authentication region controls a bit.