Closed some admin security holes