added user mass assignment
added admin link and route