simple auth to admin, moved images