add authentication for admin task