Requiring password before admin actions can be taken