Check auth and test dummy app
should ignore devise's authenticate_admin!