Remove the unnecessary static/admin directory; protect static/admin.js, just on principle.