FIX: Change is_staff to is_admin for group posts to match other places

Change is_staff to is_admin to match other places where guardian.allowed_category_ids is used

https://meta.discourse.org/t/security-permissions-and-messages-displayed-on-group-url/22169/17