added authentication to admin section