Closes #47 user object is enhanced

isAdmin and isSysAdmin now part of req.user