added security checks to admin area