admin can now change a users role (need to allow saving of this), and users can see their role in the profile page