adding authentication and authorization
add admin page