added access rspec for admin and hr