ONLY the login is secure in admin,
so this is normal.