hide admin bar based on user capabilities