thank you jason, I've now done what you said, it works now but the access level is not working properly
1) it's allowing the staff to login but have access to page that is only meant for the administrator
2) it's not login the administrator to login at all