Change admin to use .adm to avoid drive-by login attempts