as an admin I can impersonate another user