CMS and administrator/client authentication