Lab: Unprotected admin functionality

when you play like CTFs you already encountered the robots.txt which blocks the web spiders and preventing enumerating your protected pages like the admin panel

just delete the carlos user