routes user to /admin