source code on the frontend leaked a special support paremeter

https://chal66-aabhyt5.vercel.app/?support=1

button to create an admin token and access the flag endpoint:

Wizer{N3v3r_tru5t_cl13nt_51d3_3ncrypt10n}