Allow changing role only if user is admin