Restrict ticket controller actions to admins