added admin servlet and security check