lock down admin functions to admins
Merge pull request #73 from satrent/AdminAuth

lock down admin functions to admins