moved action which dont require admin auth to public settings controller