check if user has admin privileges