application controller is also necessary in non-admin namespace *oops*, added devise for admin authentication