Adding admin users, and some protection around devices
Bugfix where users with a device could see experiments not belonging to them