remove leading '/' at resource url
allow add documents only to admins