adding test for logged in user who is not admin