[fix] Do not protect admin & api path, on every domains