[Bug 879012] Added a security to the admin console, and unsecured api routes