added an admin attribute to the user object and the authorization procedures