update admin to use oauth2 and retire old interface