Add methods for changing user roles to index and User.class controller

As I commented in the frontend: I'd say use /user/role/change here.