started 385 authorization from scratch
fixed the version
authorize and limit the post function to admin