add checking if user is admin