can now only access rails admin if user is an admin