Create admins, add validations

Avoid setting instance variables outside of the action method. It hides what ivars are being set. We typically do something like `@forum = find_forum` in the controller. (This applies to the rest of the PR as well)