Admin as a whitelisted config, auction layout

* refactored middleware for browse prefix and ensure authenticated
* added underscore for checking for admin usernames via arr contains
* advertising slots info moved to details
* bidding moved from index to details