[enh] better url for admin auth (/user/su/username)