fixed up the access issue that allowed anybody to visit the admin page