fixed auth in admin panel