add stuff to protect admin screens from non admins