changed active admin to use user role for authorization instead of admin_users