conditional to head admin login, middleware for ad
redoing routes, login is at root

reconfiguring routes to allow login is first, and updating users model.
middleware for route protection