public function login($username = null, $password = null) {

        $logged = $this->Auth->login(); // result is boolean(true) all the time
        $userObj = $this->Auth->user(); // only the user name

        switch ($userObj['role']) { ... //  Illegal string offset 'role'