Add @admin decorator to handle access control.