Add Admin controller, use user model role to handle permissions