misc auth/admin fixes