authentication and authorization for admins added. was pain!