Add admin flag to User and allow app interface access only to admins.