RFP Add admin rights, bugfix in user controller

Since this will end up possibly redirecting them, I'd probably use a ! on the end