Add role field to User.
Add restrictions based on user role of admin.
Add some more URL magic for admin role.