class AdminController < ApplicationController
  before_action :authenticate_user!
  before_action :check_admin

  def new_user
    @user = User.new
  end

  def create_user
    @user = User.new(user_params)
    if @user.save
      redirect_to users_path, notice: 'User was successfully created.'
    else
      render :new_user
    end
  end

  private

  def user_params
    params.require(:user).permit(:first_name, :last_name, :email, :password, :password_confirmation, :phone, :company)
  end

  def check_admin
    unless current_user.admin?
      redirect_to root_path, alert: 'Not authorized'
    end
  end
  
end