refactored, removed admin server, added new authenticate approach