Update routes.py

routes.py

@@ -137,7 +137,7 @@ def logout():
 @app.route('/admin')
 def admin():
 ### Implementing fix for broken access control:
-#    if 'role' in session:
+#    if 'admin' in session:
 #        return render_template('admin.html')
 #    else:
 #        return render_template('/')