Added authentication for admin routes to resolve #6