locked down all admin routes
Merge pull request #46 from dtothefp/lockdown_admin_routes

locked down all admin routes