added ability to impersonate another user