Add user role setting to user management.

Make user role editable. Once the role is set server authentication takes place so be careful not to dos yourself.