add variable to session to flag whether person logged in is an admin
removed the constraint in credit_card_number for alerts (fixed deletion of CC from hotlist)