Constrain talent creation to admins

* Create admin talents controller
* Make talent new view admin only
* Edit routes
Shouldn't these changes have been in a different PR? I don't see a migration in this one.