Adding user-role identification to the login system, caveats for session storage, customizing actions for the logged-in user.