ensures only admins can access the admin area