added require admin method to app controller