added $page = $_GET["page"] and untested delete action for admins