tweaked admin controller to accept strong paramaters