only admins can rotate images