fixed bug in admin security filter