Add auth for staff panel