Admin security fixes