public ActionResult MakeAdmin(string userName)
{
_user = _user.Load(userName);
_user.AddUserToRole(UserRole.Admin);
_user.RemoveUserFromRole(UserRole.User);
return RedirectToAction("List");
}