Restricted UsersController to admins only. Updated RSpec accordingly