admins can be created and removed and admin permissions exist because we need users to manage other users