Add methods for changing user roles to index and User.class controller

You should ensure, that the user, (who is logged in) is an administrator and therefore allowed to change Roles. In my opinion there is a method in the userManager. If not please contact me.
In case the user is not an administrator please return HTTP Status Code 403 (Forbidden).