ensure admin user remains