Secure APC, preventing leak of secrets

Securing APC by including it in the admin_console instead of using an iframe.