we should check if a user is logged in before we check for admin privil...