diff --git a/net/server/internal/main_test.go b/net/server/internal/main_test.go
index 0a689727..ae6d581c 100644
--- a/net/server/internal/main_test.go
+++ b/net/server/internal/main_test.go
@@ -53,16 +53,24 @@ func TestMain(m *testing.M) {
 		panic("failed to configure account limit")
 	}
 
+  // admin login
+  r, w, _ = NewRequest("PUT", "/admin/access?token=pass", nil);
+  SetAdminAccess(w, r)
+  var session string
+  if ReadResponse(w, &session) != nil {
+    panic("failed to login as admin")
+  }
+
 	// config server
 	config := NodeConfig{Domain: "databag.coredb.org", AccountStorage: 4096, KeyType: "RSA2048"}
-	r, w, _ = NewRequest("PUT", "/admin/config?token=pass", &config)
+	r, w, _ = NewRequest("PUT", "/admin/config?token=" + session, &config)
 	SetNodeConfig(w, r)
 	if ReadResponse(w, nil) != nil {
 		panic("failed to set config")
 	}
 
 	// check config
-	r, w, _ = NewRequest("GET", "/admin/config?token=pass", nil)
+	r, w, _ = NewRequest("GET", "/admin/config?token=" + session, nil)
 	GetNodeConfig(w, r)
 	var check NodeConfig
 	if ReadResponse(w, &check) != nil {
diff --git a/net/server/internal/testUtil.go b/net/server/internal/testUtil.go
index 6a6d09c0..63740785 100644
--- a/net/server/internal/testUtil.go
+++ b/net/server/internal/testUtil.go
@@ -618,8 +618,16 @@ func addTestAccount(username string) (guid string, token string, err error) {
 	var profile Profile
 	var login = username + ":pass"
 
+  // admin login
+  r, w, _ = NewRequest("PUT", "/admin/access?token=pass", nil);
+  SetAdminAccess(w, r)
+  var session string
+  if ReadResponse(w, &session) != nil {
+    panic("failed to login as admin")
+  }
+
 	// get account token
-	if r, w, err = NewRequest("POST", "/admin/accounts?token=pass", nil); err != nil {
+	if r, w, err = NewRequest("POST", "/admin/accounts?token=" + session, nil); err != nil {
 		return
 	}
 	AddNodeAccount(w, r)