Secure admin access protected by multi-factor authentication