Add admin users

- Protect admin only actions
- Hide admin only actions from frontend
You could also DRY the two `it` blocks up a little by making `helper.menu_links(site).count` the explicit `subject` for this spec.