Refactor AdminManager for easier subclassing
Expose resource includer to subclasses
Use login dialog from AdminManager
Path security vulnerability

* potentially exposing internal data
* does not allow unauthorized users to write