fixed security to only allow admin to access the admin stuff for the index for now