Now checking for admin user on create - but need to work through rest of spec and scenario.