redirect user back if they hack into the admin page