remove auth check for addAdmin