rights are changeables

rights can be changed with /admin/adminuser
fix errors with post and admin
better user model