fix active admin
fix api login
items limit
implement auth