Corrected admin access rights, and fixed the return data through Passport to ensure 401/403 rather than 500 errors from authentication. Resolves #31