protect admin area over the can_administer? method