prevent non-admins from viewing the admin edit page