fixed authentication statements in admin module