admin page now requires logged in user