fix OPENUCB-152: get admin role programmatically

This should be the final fix for preventing builders from assigning the admin role. It finds the role name programmatically and then excludes it from the TC user dashboard form. 

This will not prevent anyone who has 'admin users' privileges from assigning the admin role, and Brian's earlier caveats about bypassing the form itself still apply (see bug report).