diff --git a/src/routes/api/admin/dienststellen/+server.ts b/src/routes/api/admin/dienststellen/+server.ts
index cb59425..a459bec 100644
--- a/src/routes/api/admin/dienststellen/+server.ts
+++ b/src/routes/api/admin/dienststellen/+server.ts
@@ -1,5 +1,4 @@
 import { PrismaClient } from '@prisma/client';
-//import { PrismaClient } from './src/generated/client';
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 
diff --git a/src/routes/api/admin/login/+server.ts b/src/routes/api/admin/login/+server.ts
index b68d469..a792187 100644
--- a/src/routes/api/admin/login/+server.ts
+++ b/src/routes/api/admin/login/+server.ts
@@ -1,7 +1,7 @@
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 
-const ADMIN_PASS = 'supergeheim'; // 🔒 Besser aus .env lesen
+const ADMIN_PASS = import.meta.env.VITE_ADMIN_PASS;
 
 export const POST: RequestHandler = async ({ request, cookies }) => {
   const { passwort } = await request.json();
@@ -17,4 +17,4 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
   }
 
   return json({ error: 'Falsches Passwort' }, { status: 401 });
-};
\ No newline at end of file
+};