Add methods for changing user roles to index and User.class controller

Later there should be some sort of detection which evaluates if the Roles is to be changed, or the password, the mail address or what ever.
Please add a TODO comment and an Issue into the bug tracker referring to this code line.