setting up API authentication
added an admin user

this is the user that makes API requests
added cookie authentication to the API