checks if user can access admin app