Added access control to the rails admin backend, must be an admin