user#full_name method returns last name first, rails_admin object_label_method uses #full_name
remove CSRF attacks comment in application controller
application controller: after sign in path redirects to rails_admin if current user is admin, else root