change user: promote and demote, change user template and security layer