Require authentication for /admin

While this is a simple commit, we may need to hold off on merging this to master in the mean time because we have a lot of pending pull requests for AppExpress. At the moment, this was changed directly inside congrats.