remove http auth from admin controller