hack on admin controller