separate controller for admin routes