fixed admin path disclosure
Merge pull request #201 from thebod/master

APPSEC-7: fixed admin path disclosure