restrict couch access to admin