now distinguish user and admin