“There was no authentication on the admin page because it was hidden and could not be known to hackers.”