make new topic check if user is admin
finish patching security hole