Prevent access to locations/new unless user is admin