Use user.superadmin? instead of ==
Add specs for questions controller authorization
Redirect /questions and /questions/:id to /questions/new unless answers_enabled