Added security role declaration to admin controller