Added ROLE_STAFF to security.yml
Updated AdminController to check for ROLE_STAFF