add admin field to users
tweak test data generator again (diversify roles)