Add basic user roles admin, public. Remove ability for public user to go to /admin*