securing the admin role endpoints