fixed admin auth