implement authorization/admin privileges, write tests