Removed admin. Changed cookies to be secure and http_only