api tests: make adminSecret a variable instead of a constant