I would advice to secure the admin area with an addition basic-auth layer