restriction to control operators; admin able to be created if no admin left; current auth-token now cant be taken from api; admin couldnt remove admin