admin commands only if user hast auth