updates

admin dashboard
user permissions
settings