Removed basic http authentication and added an is_admin field to manage user roles in Users