Missing @PreAuthorize on Admin

Admin endpoints only protected by URL pattern typo. Free lesson on Production Engineering. Read it in the browser.