fixed a little security issue with getting admin access when $_SESSION['pw'] wasnt set. Skipping should now be fixed on both the middleman and target