Allow admins to impersonate users

Fixes #25