using secured trait and isAdmin todo