right, this code at line 77 - 81:
<?php
if (!WA_Auth_RulePasses("Logged In As Admin")){
WA_Auth_RestrictAccess("../esm-staff-login.php");
}
?>
is checking to make sure the user is logged in, then the WA_Auth_RestrictAccess() function is trying to use the header operation to redirect the user.
this cannot be at this point in the page because there is alrteady HTML content.
the header function can only be used before the doctype or any other output is made to the page, it's not just blank loines that cause the error, it is ANY output. that can be a blank line, HTML tags, HTML comments, javascript, a php echo or print statement.
your page access check needs to come before all other HTML on the page.