default Site if it does not exist
create admin command
redirect from /admin if user is not a staff member

middleware prevents showing the login page for unauthorized users