Need a `before_action :authenticate_admin` here.