Add rails_admin and cancan gem. User can not access an admin page only an admin can.