make sure users are authorized to access /admin
allow admins to delete comments