added re-direct if current_user is not admin