adding authentication and securing admin page