Administrator escalation via client-supplied capability flag

Privilege escalation in Import and export users and customers before 2.5.2 allows remote authenticated users to gain Administrator access. The request-driven CSV import paths trust the submitted caller_can_promote_users value instead of rechecking the caller's promote_users capability. Possession of create_users access is sufficient to create a new Administrator account or promote an existing account.