put management console behind login and admin check
basic access control - set, delete, add links don't show up when not logged in; api only works for logged in