Added automatic 'current user' property

Fixed access control
Disabled ability to remove admin flag from current user