Adds ensureAdmin check to /admin-route

Apparently not covered by /admin/* pattern, but thats ok