Issue 17: User can become admin.

Fix issue #17