Create admins, add validations

But this code is not doing `find_forum.topics.find` - it's finding a forum, throwing that away, then finding a topic. I think that anyone can destroy any topic with this code.