1: first user to log in with oauth should be an admin
2: admin page should display the table of logged in users, with a promotion button next to each user. This would allow an admin to share admin capabilities with another person without logging into the database