Make sure users can not view admin only page