add auth for admin page