finishing up admin api

apart from /admin