take stock of this, how we store whether users are admin or not, making sure there's always one admin user available, etc.
maybe we should have a cli command that just adds an admin user to the existing db for if the db gets a bit stuffed or if someone forgets their admin creds?