added refactored must_be_admin method