fix bug in admin auth