fixed admin and auth