flesh out specs
add admin role to users