Prevent users to access admin page via browser address bar directly