Admin security enhancements

partially covers #389, please do not merge yet..
need someone to check the english text strings.. huh, my english still s*cks..