test: 'admin' unaccessible from guest and student accounts