The users admin status - must be explicitly set.

Also implicitly checks if the userstate record to avoid scenarios where applications might not be explicitly checking both for authentication and admin

public virtual bool IsAdmin