Admin login fixer upper

Adds new route that allows admins to login. 
Fix up user session/admin session validation 
Yeah, sorry. I was hoping we could get away with just validating based on whatever fields were passed to the route, rather than distinct "admin" and "user" login logic. This looks totally fine though.