Create admins, add validations

this should already be covered by `require_login`