added admin authentication + app.rb code split into controllers