Add isAdmin param to admin templates
Update /admin/api/sites to return lightweight json
Lock down site permissions
Fix admin redirect, adjust admin content endoint