Add RSpec test for inaccessibility of the admin attribute