User can login to journal for which they are not registered

HI @elt,

As per our other discussion here: Expected behaviour of Add Reviewer - Enroll existing user - #4 by rcgillis - this is expected behavior, and as noted, the user cannot perform any functions in the journal for any roles that have not been assigned.

-Roger