added middleware security to admin page, redirects to home if unauthorized