Possible bug: Did not require user to log in to access admin page?