added admin db controls. Security now works somewhat, just not https