fix media not clickable

also authorize admin on admin controller