Add constrain for /admin route

Sets a flag in development.rb to enable admin routes. This should be set
to true on a backend box as part of the deploy process.

https://www.pivotaltracker.com/story/show/67458214