How to protect admin pages?

Awesome, thank you! That makes sense.

But only those controllers that will display admin pages should check if the user is logged in, and no need for those controllers that simply display blog entries. I mean I should have separate controllers, right?