improved authentication for admin