fix a current_admin bug to view all users, and add some specs