If user is not an admin, throws 401 error

* Modified the admin controller to render 401 error