Fixed a pair of bugs that were keeping the GET /api/patients.json request from working

`is_admin?` seems to have been replaced with `admin?` in the user model.

`:last.acsd` was replaced with `:last.asc`, but that is just my assumption that it's what should go there.