Security fix: users are allowed to edit their own profile, so I moved the
siteAdmin bit out of the profile, where no-one (not even site admins!)
are allowed to change it.