added session variable access_lvl for admin link hiding