update active admin to authorize admin users only