update app controller: add admin function