Administrative page still accessible by anonymous users?
The problem is you are setting 
'access callback' =&gt; TRUE 
this gives access to all.
I also to sure that administer is a valid permission in 'access arguments' =&gt; array('administer'), instead try 'access arguments' =&gt; array('administer site configuration'),.