fix: security vulnerability [...]

close vulnerability allowing any user to gain admin rights in site
application