signed in admin helper (untested, pending controllers)