User permission related fixes

1) The first admin is not allowed to be delete / deactive or remove
admin permission.
2) Admin can view every visits, user can view his own patient’s visit.