Fix bug in door update and restrict config api to admins.