fixed routes and admin access