some security, tweaked admin stuff