Add authorisation checks to admin page