add admin method
add admin view
add authorize attributes