added some more role checks to employers_controller/edit #316