added security filter and administration moved to /secured folder