Extract ensure_admin to application controller, refactor