Prevent non-admins from accessing rails admin