updated so only the admin can enumerate clients

this fixes #21 
can you not do this check in sql itself? if not, this is ok