add admin session check