accounts: add is_staff to user table