src/auth.coffee: use isAdmin function

because user.id isn't a string the comparison was not functioning
correctly - the admin list is an array of strings.