go over how we control admin privs on the bouncer

[DanielOaks]

take stock of this, how we store whether users are admin or not, making sure there's always one admin user available, etc.

maybe we should have a cli command that just adds an admin user to the existing db for if the db gets a bit stuffed or if someone forgets their admin creds?