The authentication now, every one with account can go to admin page. Add role to the user, so only admin role can access.