add admin flag to user