added redirect from punchclock to login if user is not an admin