switch to admin api for validation

in our current testing config auth is required for
the non-admin port