added code to auth if user has admin role, otherwise redirect to application route