added authentication policy and admin options