User-agent: *
  Disallow: /session
  Disallow: /admin/