update Admin controller with proper admin verification