Admin delete protection

* Admins must not delete themselves
* Admins must not remove their own admin flag