the following endpoints need to be created in the UserController:
get /api/v1/users/{userId}/roles
post /api/v1/users/{userId}/roles
get /api/v1/users/{userId}/permissions
delete /api/v1/users/{userId}/roles/{roleId}
get /api/v1/users/{userId}/roles/{roleId}