Protect the sync page from normal users