private bool IsAuthorizedToUpdateUser(User user)
 {
     return false;
 }
        private bool IsAuthorizedToCreateUser(User user)
        {
            if (HttpContext.Current.User.IsInRole("manage-all") ||
                HttpContext.Current.User.IsInRole("manage-users"))
            {
                return true;
            }

            return false;
        }