resolved #2, finished authentication piece and added filter to check for admin areas