does it work if you let anyone read the adminToken?