Moved the helper function admin_user to session helper class and also disabled CSRF verification for policy editor to prevent a crash