added http auth for admin