User authentication in place for all administrator urls