Refined admin endpoint permissions

Every endpoint requires the user to be a admin, but many endpoints are intended for moderation