Changed user model to isAdmin and worked on authorization security

[mscherryxu]

• Prevents sequelize injection
• Not allowing access to /api/users with bad token middleware (will need to update to only allow admin to have access)