adds authenticate:true to admin state, and removes an admin route on server side