add audit log for changing Role position

Add logging for changing role pos, because now when someone change role pos you can't figure out who it is :(