We went back and forth on this. If it's not scoped by slug then there would be different signin pages, one for admins and one for account users. It seemed cleaner to have a single signin process, not a special case for admins, and simply limit admin access at the controller level based on the user's privileges. We also assumed it was reasonable for an admin to have an account.

Thoughts? Do we have specific requirements for this from Eileen?