Allow only the global admin to set the is_admin bit via Forms