It’s assumed that the admin user always has the id 1. That’s not very secure. Removed the condition entirely.