Remove duplicate permission specs

Replace usage of :admin_scope => true with admin_headers

Header_for checks for user.admin? rather than opts[:admin_scope]

[#73067836]