add staff/new, staff/edit.
add authentication and remove console.log