wire up authentication framework at /admin