Added check for admin privileges on admin controller. added flash messages.