authenticate user for admin blog actions