rails admin now requires admin role for login
clarify constant name in User for roles