finished admin priviledges and user authentication