add promote/demote function for users