Add user authorization methods

* Set protected! on admin page