added admin check in login