manage roles controller update