Updating controllers to a cleaner way of requiring the current user to be an administrator.

Closes #654