fixed bug in bracket SQL, added basic admin controller actions