custom auth for admin or employee as self