outsource isAdmin & isAuth -> MyUtil class