def destroy
    @user = User.find(params[:user_id])
    @role = Role.find(params[:id])
    @user.remove_role @role if @user.has_role?(@role)
    redirect_to action: 'index'