protect_admin() working correctly