security for admin pages all future admin type pages must extend AdminPage