Lock down the admin area for non-admin users