move admin routes out to separate file