add admin field to the user table and limit access to the /admin page to users with this field being true