The issue lies in the the method isAuthenticated on the UserStore.
Specifically, here:
authenticated = _utils2.default.groupsMatchExpression(user.groups, options.inGroup);
user.groups contains an array items of objects representing each group. But, the groupsMatchExpression function is looking for an array of strings. Currently unable to restrict any routes to an "Admin" group.