Add authorisation to all admin paths