Make the admin check in user controller indirectly through method,

add TODO comment for changeRole route