method to check if session corresponds to an admin
check for admin when creating privileged resources