add admin user to hydration
removed insecure package and defined allow rules for Tags, Phrases, and Settings. ref #1