When switching authentication methods, make first CAS user an admin