using HUBOT_AUTH_ADMIN, so no need for roles.coffee