add authentication scheme for admin users
add middleware to test for expired token and write test for same