add validation of access to admin area