add /devadmin/ to whitelist