basic user promotion, button based
can change between three mutually exclusive roles with radio buttons
only admin can change roles
fixed bad authorization logic