fix in Audit, set username to "admin" when security context not
available (e.g. when importing)