began admin login work
routes and permissions