fix /admin/security api
fix json parser core