Issue 17: User can become admin.