Add admin flag to users. Restrict creating, updating, and deleting important resources to admin-only.