Prevent operator from reading and editing user information

    Checking the session var if the user issuing the request is a
valid admin.