admin controller and validations