fixed user auth on admin area