composer update
wip admin

* security firewall for admin
* login with sample user