implemented admin secret, improved routes