added redirect if not admin