add admin manage and auth