added authorization to admin dash