security: add some site admin feature auth check code