Expanded role management

I think deleting a role and adding the role to a user are separate things, so separating the role permissions as "advanced manage roles" and "change user roles" would be nice for theft of admin accounts or a troll attempt

i think this is the most important thing in managing a server