tweake user/admin model: add admin controller/permissions