Checking admin access

Verifying session via /auth/verify and role via /users/me.