Added setting adminOnly to only display for role admin

adminOnly : bool , default=false to provide usual behaviour. It should be default true for maximum security

Ref #160