add admin login/logout
error handling