added admins and authorization logic...completed chapter 14