added admin area with authentication