invoke/revoke admin rights in users#index