[FIX] add a variable that keeps track whether the authenticated user is admin or not