Made user roles changeable only by admins