protect against unauthenticated user when calling IsRepoAdmin