changed admin controller to use auth model. Added new API call to create users. ToDo: Secure API Access via API Key.