login: prevent admin contents on profile subpages