added security to admin pages