api: remove isAdmin handler and add is_admin in login