Implement authorization/admin

Closes #25