Admin route should be private.