moved admin login handling to minimarshal.php, not frontend