Refactored user model for admin role. Authorization policies partly done.