Ensuring admin controllers are "whitelisted"