add admin controls to logged-in nav