make user reroute if not admin