fix redirect logic and view
add spec to check for admin when trying to access user index