Only let admins add locations

@liantics 
@aslawter