added expire to token, and added admin only authenticated routes.