Allow an admin to change a user's role. Easier now that roles are not many-to-many.