custom security handling for admin
use custom tms_admin.security.handler.default