created test user, added security to the admin pages, misc fixes