Because a force a session reload. The edge case is when the admin flag is set to false but the user was already logged in; the user will still be able to access admin.