add admin authentication to non-public pages