protect admin mode page