Add admin link and restrict to isAdmin