Admins only get passwords.

auth.go

@@ -24,10 +24,14 @@ func reqPass(w http.ResponseWriter, r *http.Request) {
 	if err == nil {
 		for _, m := range g {
 			if strings.ToUpper(m.Nick) == strings.ToUpper(username) {
+				for _, r := range m.Roles {
+					if r == config.AdminRole {
 						userID = m.User.ID
 						log.LogInfo("User ID found for %+v as %+v", username, userID)
 					}
 				}
+			}
+		}
 	} else {
 		log.LogError("Unable to find user ID for %+v", username)
 	}