Protect Admin routes

- show admin name not email
- hide links from non admins

closes #5