fence admin routes with session verification
update readme