moved ViewSystemProperties() back down into adminAction and clientAction
and made sure clients do not have access to admin username/password