Added access control for admin controller