modified urls to check for admin bool in settings before allowing admin access