in the 2012 NJPO Board Member rule, you are using a session named "userLevel", but that session is not created by the login page.
the login page creates a session named "SecurityAssist_userLevel", that is the session you should be using in your rule.