authentication fix, admin authorization