add admin flag to users