Comments - Basic security

- Added some comments
- Basic security : a non-admin won't be able to add restaurants anymore
(no sql injections protections though)