Admin should make call to authenticate user return with admin object