add admin role
login_admin as controller macro
allow admin access only with role Admin