updates to authorization, views for admin