added admin-ajax exploit to adminhax

keep those bruteforce bots out