added authentication for admin tasks