GET /admin/candidates works according to spec