protect admin page from unauthorized access when the password got leak