users can add regions

how about a `before_action`? it should also handle redirecting to the appropriate place and showing a flash message if they are not an admin