added new admin page and checks to ensure only users with role admin can see