adding admin action to promote/demote users