Refactor changeRole() to return a 403 HTTP errorcode
if a user has no sufficient rights