Only do the admin authorization for html requests here