Fix login redirect by setting auth cookie and routing by role

Add Hugging Face Space deployment