changed the new lesson controller to admin only