event admin auth checked before page load