Refine user_is_admin to require_admin before filter.