clean up authentication for admin apis