add staff, superuser attributes to the user data sent by the JWT auth