some admin authorization. added page for non admin user