updates to admin section; refactor of dbconfig to mudsettings; locked down admin section to logged in to test admin user (using  passportjs for auth)