APPSEC-7: fixed admin path disclosure

Because no one fixed this in the past 2 month here is a hotfix. I hope this doesn't break Mage_Authorizenet functionality, if so, then someone should consider rewriting the whole module...