to access a user controller you must be admin