route all the admin routes through an authenticator (fix-routes)