moved admin upload functions into controllers/admin; re-organized routes/admin to look like routes/index; removed unused deps