added admin authentication (must test), MUST ENCAPSULATE DATA