Creating controller actions for adding/removing roles