Admin or User Distinction

[HilariousSoupXD]

In the current design, both admin and user login functions are separate (using the boolean parameter), but there's no persistent state that indicates which type of user is logged in. Due to this, anybody can tamper with the status of the complaints.
I believe this issue to be at least medium in difficulty, but I trust the maintainers to label this issue accordingly.

[HilariousSoupXD]

I would like this issue to be assigned to me, as I plan to fix this via:

1. Adding a Login State Variable
2. Modifying the Login Function
3. Restricting the Update Status Functionality