added the rights to edit user roles to admin only