Assigning roles for first login accross two rules