add auth to admin