User.is_admin should default to False!!!