do not allow show action on admin controller