add role validation in restaurants_controller