requires login credentials for administrative pages