updated controllers and views to support user.admin