If you view the site’s Cookies in the developer tool after you’ve logged in as anything other than Joe, you’ll notice there is a peculiar ‘admin’ cookie set to False, simply send a request with ‘admin=True’ then voila we will get the flag.

curl -b 'admin=True' http://fickle-tempest.picoctf.net:50274/flag