Modified sales_controller so that only admin has credentials