7172

not protect the file for session admin - refs BT#7172
There's a better way to do that. See the documentation of api_protect_admin_script(): the first param says "allow_sessions_admins" :-)