Added new controller in admin routes to update the records for all users.
Added Authorize attribute to all admin routes.