Basically I want to make an admin role who can change or adds the role to a user that is only limited to a session. That role should go away with the expiration of session.