add auth in page

hide admin operate for normal person