added security vendor, moved admin controller into its own service, and few tiny changes.