Restrict web handler to admins