optimize current_user in admin controllers
add spec examples for frontend controllers