fixed authentication

now only admins can log in to all blogs and everybody else can only
login to their blogs