app.isAdmin available client-side