paperclip for admin and user profiles, error handeling in place, restrictions for non-admins