redirect staff/superuser passphrases to /admin/
reject inactive users