Woops, got the admin rights backwards.

Should have been admin can only access /admin/invitecodes, not /admin/startup. Superadmin can access both.