add is_admin to web user API