POST: Assign role to user