Admin Controller added with basic Crud ops

Controller locked down with Authorize