u/ILoveTolkiensWorks

I think you should add checks for admin authorization other than just checking for the is_staff attribute in a localstorage key-value pair...