added admin user index and 404'd non-admins trying to view it