added security - must be admin to use admin page