Lab 1: Unprotected admin functionality

https://portswigger.net/web-security/access-control/lab-unprotected-admin-functionality