Admins only get passwords.

auth.go

@@ -24,8 +24,12 @@ func reqPass(w http.ResponseWriter, r *http.Request) {
 	if err == nil {
 		for _, m := range g {
 			if strings.ToUpper(m.Nick) == strings.ToUpper(username) {
-				userID = m.User.ID
+				for _, r := range m.Roles {
-				log.LogInfo("User ID found for %+v as %+v", username, userID)
+					if r == config.AdminRole {
+						userID = m.User.ID
+						log.LogInfo("User ID found for %+v as %+v", username, userID)
+					}
+				}
 			}
 		}
 	} else {