allow password/role for admin user to be modified