added check for admin before post methods and tests