administrator interface + authentication