Admin interface: extract admins from admin group
Adjust new admin handling: simpler is_admin?, add fkey