Make adding/removing sysadmins a POST request instead of GET. Stop browser prefetch promoting people!