add login and permission process only superuser can visit admin page