add authenticate, put all scaffold to admin path , create token for mobile api