refactor & open admin functions to current_user temporarily
set user name as unchangable