Fix routes to avoid http auth for admin approve/reject routes