python 2.7 - App engine app.yaml setting for admin users -

i wondering how can configure app restrict endpoints logged in users or admin users. here app.yaml

handlers: - url: /favicon\.ico   static_files: favicon.ico   upload: favicon\.ico  - url: .*   script: main.app  - url: /admin/.*   script: main.app   login: admin 

however doesn't work. when visiting endpoint beginning /admin/ can access url without logging in. there configuration setting i'm missing?