adds redirects to prevent non-admins from accessing admin.html and editUser.html.  Add role cookie upon login to check