changed superuser determination to new user.isSuperuser() method