make doFinaliseUpdate more secure, change admin product sorting

- doFinaliseUpdate  secure by do validation of secure_code
- change default admin product sorting to product_raw.date_created desc