added ability to change the role of a user