convert /user admin route to use client api (see #341)