Require admin when accessing REST pages