fixed up admin authentication