Not quite certain why this must be explicitly coded outside of WordPress, but something to keep in mind:http://pento.net/2011/06/19/preventing-users-from-accessing-wp-admin
Not quite certain why this must be explicitly coded outside of WordPress, but something to keep in mind:http://pento.net/2011/06/19/preventing-users-from-accessing-wp-admin