added ability for manager to change users role

* AR enums suck, looks like a hash but not a hash
* created form for user and form for manager
* different params for user vs manager as well
So far, two "presentational" methods. As this list grows, we start to be pulled towards wanting to have a presenter. The code will tell you.