Add methods for changing user roles to index and User.class controller

This will result in a http response being sent, please delete this line!