Add the not-authorized route

This was missed when creating the new admin app.