improved admin page, allowing staff list editing; auth based on roles