Updated admin routes with permissions and correct naming conventions