Lock down specific action controller to admins only