add admin flag to users table