added redirect to login if user goes straight to admin controller