added admin route. Fixes #2
added accounts and /admin restriction. Fixes #2, #3