Added authorization to the admin controllers and an authorize before_filter to manage permissions