added isAdmin check closes #9