admin routes moved to /admin
two step login, using in_memory provider for now
admin username and password form two parameters
Admin Username and password in README.md