refactored admin login, created 'become admin' ability if you are logged in and there is no admin