Changed login exclusion to be a role instead of a permission