add current_user is_admin check to show new/delete