basic admin route/auth working