Moved user is admin check into controller