add simple form and implement authorization for admins