return the user's role from the db i.e. are they admin or not. Only Kallina is admin. Make sure that we check the admin role when actually doing the actions that require it on the server as well. Only client side checks at the moment which are insufficient
added a basic password reset feature. This needs a lot more error handling around it I think