Issue 17: User can become admin.
Merge pull request #22 from henriquelampert/user_becomes_admin

Fix #17: user can become admin.