Super simple admin authorization

Currently the only restricted action is the creation of challenges.