limit access to Payments page to admin only