flasho[:error] if user is not admin