add is_admin attribute to users
use single ability model