As USER allow changing your own role from Manager to anything else

refactor the update method to do first CREATE action then a DELETE action in order to avoid leaving the user without any role.