Configure firewall for admin and contribute routes

This allow end-user to navigate to a link and be prompted for login
if not logged in and acces is rejected. But if user is already logged
in we send back a 403 and it will fail silently (should be improved with
message to end-user)