re-order items
prevent login for non-admin, there's no need for it