diff --git a/dev_mvc/model/testactions/model_createdb.php b/dev_mvc/model/testactions/model_createdb.php
index 73b1300..c0a71d0 100644
--- a/dev_mvc/model/testactions/model_createdb.php
+++ b/dev_mvc/model/testactions/model_createdb.php
@@ -4,7 +4,7 @@ if(isset($_POST['auth'])){
         createDB();
     }
 }else{
-    echo('test');
+    echol('you have no authorization to do that');
 }
 
 function createDB(){
diff --git a/dev_mvc/model/testactions/model_populatedb.php b/dev_mvc/model/testactions/model_populatedb.php
index b7b3483..1891032 100644
--- a/dev_mvc/model/testactions/model_populatedb.php
+++ b/dev_mvc/model/testactions/model_populatedb.php
@@ -1,4 +1,12 @@
 <?php
+if(isset($_POST['auth'])){
+    if($_POST['auth'] == getenv('ADMIN_ACTION_KEY')){
+        populateDB();
+    }
+}else{
+    echol('you have no authorization to do that');
+}
+
 function populateDB(){
     try{
         if(getenv("SQL_CREDENTIALS") !== false){