Update routes for admin and session controllers
Update functional tests to match implementations
Limit access to regular users from administrator rights