When /admin is protected by nothing more then:

var admin = false;
If(!admin){
setTimeout( function(){
window.location.href = "/home"
}, 1000);
}

My favourite to ever stumble on and dred going through hundreds of files to actually fix😣