Move is_admin_key? to authorization helper