simplified rails admin with whitelist