Management of roles on people who are superusers

[cielf]

Summary

If a super user has a role on an organization, neither the superuser nor the org admin can manage the role.

Why fix?

Might be symptomatic of something deeper. However, there is only one person with this situation now, and it's only on a test organization.

Details

We need to check into some data cleanup for this, but also the super user being able to assign other superusers

Criteria for completion

• the user's role on a bank can be managed by the org_admin, no matter what other roles the user has (though they still can't delete themselves)
• the superadmin can manage another superadmin's roles on a bank (I think we have another issue out there for superadmins managing the superadmin role (other than their own).
• tests to support