Fixed two deface warnings for the admin side

Fixes #63
Add User#admin? method.

Fixes #67
Address state is required (and shouldn't be)

Email validation in checkout controller decorator assumes the
`address` state will be the present. Changed to use the first
checkout step via `current_order.checkout_steps.first`.

Fixes #59