Display virtual control message only if the admin is connected

This PR fixes #918 
use the security context insead of session.