Add login for admin

* controlled access to admin functions using before action callbacks
* used has_secure_password to store encrypted version of password