Put Auth filter back...

... on AdminOrders and AdminTickets controllers