Hiding Insights link for non-staff users

@rocha @dsjen 
change to `and access['admin']`.