php: allow new admin with admin session