The administrative application currently uses session data to track which tenant is being operated on. The tenant id is not present in the URL at all. This makes bookmarking tenant pages impossible since the application requires state. An easy fix is to add the tenant id at the root of the URL for tenant-specific pages. Access to the tenant can be verified each time a page is loaded rather than trusting the session data.