Admin security and missing step