thats exactly how i got it so far and it works. Problem is that if someone wanted to they could just load their browser up and type http://www.whatever.com/admin.aspx without even having to log in