control admin view based on user's role
added admin.posts, admin.prefs views. user can delete itself from prefs