add CSRF and admin check
prevent direct call of sqladminer
upgrade vendor sqladminer