Fix #999

I have added a non-final rule to the admin, that matches any request.
This will have priority 100, hence it will be always before the current rules.
Could you all please validate this infact solves our admin security incident?
Merge pull request #1038 from cherokee/fix_adminsecurity

Fix #999