added authorization to all admin pages