reveal admin controls only after log in