added check in update method for current_user.admin