fix admin permissions client-side
Use Redis for sessions rather than Connect.MemoryStore()