Rating:

ofter load page echo string "You are not admin"

use cookie manager for change cookies
change "username=bob" to "username=admin"

reload page
get flag:P