open admin URL's without being logged in
 - this us pure client side for now, we'll secure the back end later