added admin role and bounded controller