right access level for /admin/*
/admin/works/: edit existing
works photos
refactoring: split into small files