moved admin status to separate Profile paramter, created protected ability to toggle that status, wrapper methods for user to check roles