protect mainhome and admin page