added rudimentary admin page that requires authentication