fix admin protection