updated products controller

also fixed products controller spec to meet with README
added admin? method to users model