fixing security on admin object (refs: #645)
Merge branch 'dev' of https://github.com/projestimate/projestimate into dev