added ability for manager to change users role

* AR enums suck, looks like a hash but not a hash
* created form for user and form for manager
* different params for user vs manager as well
The only thing to be careful of is if you are delegating a method to `Location`, then you better be sure that the User model always has a `Location` to delegate to. Will that be the case? If so, then consider adding a validation.