adding simple auth for admin