Make admin.js more secure