fixes to page routes and page admin-only pages

made routes dynamic, fixing bug introduced with page controller, and
added admin-only rights to controller and individual pages as well as an
admin permissions error page