session check for admin