adding plenty admin views and controllers, adding authorization to pages