Security fix to prohibit admin-side embeds

We have made a minor change to prevent anyone from embedding the admin side of the application. The effect should be invisible to clients, but it was made to tighten security.