separated auth and admin