Changes to ensure only the admin can update a user's role.