server-side backing for admin page, plus client-side bits