locking down backend & setting up admin area