Add administrative API

[tyrannosaurus-becks]

Related to #75

Let's hold on starting this until after we've talked about the linked RFC one more time. Want to talk about a couple of additional design issues like the problem that all administrators have the same level of access, and can create and delete each other. Want to talk though other options and look at an example from another app.