admin panel work done with auth