Added auth logic for admin