fix a little: can't goto admin.html without login