fixed access to /admin route