add admin authenticate middleware