auth: store user.id, user.is_admin on the client

- add users.is_admin field
- /auth/local sends id, is_admin, token
- client abstracts authUser (instead of using localStorage)
db: add user dealerships
db: index users.email

It’s a unique key, we use it to look up users when authenticating.