moved password and session templates into admin