add simple authentication for admin