Fix unlesses, use admin tenant / namespace & user/pw auth

can't use token for endpoint-get