Added role checking in userRemove method