Fixed require_admin for only create actions