security tweaks for remote access
added specialAccount flag on Mitarbeiter