secure /admin and /add
account mgmt: reg page