fixing bugs on admin security