admin auth (blame pfoley for the regex :P)