admin attribute added to User
ensure_admin before_filter implemented