CORE-5832 Fixes for admin endpoints.

Stripped single-quotes from allowed admin group configs.
Moved admin endpoints under an /admin context, so CAS tickets aren't validated more than once per request.