moved default admin auth restriction into base/Controller, added
controllerMap to move Rest Controllers into apis folder.