Added a test to show that the user.is_staff check in admin base.html is necessary.

refs #21067